blob: f2b39de56f4ad8f0d915e219cd059d21846b5065 [file] [log] [blame]
// SPDX-License-Identifier: GPL-2.0+
/*
* Copyright (C) 2023 Linaro Ltd.
* Basic ARM SMMU-500 driver, assuming a pre-initialised SMMU and only IDENTITY domains
* this driver only implements the bare minimum to configure stream mappings for periphals
* used by u-boot on platforms where the SMMU can't be disabled.
*/
#include <log.h>
#include <cpu_func.h>
#include <dm.h>
#include <iommu.h>
#include <linux/bitfield.h>
#include <linux/list.h>
#include <linux/err.h>
#include <lmb.h>
#include <memalign.h>
#include <asm/io.h>
#define ARM_SMMU_GR0 0
#define ARM_SMMU_GR1 1
#define ARM_SMMU_GR0_ID0 0x20
#define ARM_SMMU_ID0_NUMSMRG GENMASK(7, 0) /* Number of stream mapping groups */
#define ARM_SMMU_GR0_ID1 0x24
#define ARM_SMMU_ID1_PAGESIZE \
BIT(31) /* Page shift is 16 bits when set, otherwise 23 */
#define ARM_SMMU_ID1_NUMPAGENDXB \
GENMASK(30, 28) /* Number of pages before context banks */
#define ARM_SMMU_ID1_NUMCB GENMASK(7, 0) /* Number of context banks supported */
#define ARM_SMMU_GR1_CBAR(n) (0x0 + ((n) << 2))
#define ARM_SMMU_CBAR_TYPE GENMASK(17, 16)
#define ARM_SMMU_CBAR_VMID GENMASK(7, 0)
enum arm_smmu_cbar_type {
CBAR_TYPE_S2_TRANS,
CBAR_TYPE_S1_TRANS_S2_BYPASS,
CBAR_TYPE_S1_TRANS_S2_FAULT,
CBAR_TYPE_S1_TRANS_S2_TRANS,
};
#define ARM_SMMU_GR1_CBA2R(n) (0x800 + ((n) << 2))
#define ARM_SMMU_CBA2R_VA64 BIT(0)
/* Per-CB system control register */
#define ARM_SMMU_CB_SCTLR 0x0
#define ARM_SMMU_SCTLR_CFCFG BIT(7) /* Stall on context fault */
#define ARM_SMMU_SCTLR_CFIE BIT(6) /* Context fault interrupt enable */
#define ARM_SMMU_SCTLR_CFRE BIT(5) /* Abort on context fault */
/* Translation Table Base, holds address of translation table in memory to be used
* for this context bank. Or 0 for bypass
*/
#define ARM_SMMU_CB_TTBR0 0x20
#define ARM_SMMU_CB_TTBR1 0x28
/* Translation Control Register, configured TTBR/TLB behaviour (0 for bypass) */
#define ARM_SMMU_CB_TCR 0x30
/* Memory Attribute Indirection, also 0 for bypass */
#define ARM_SMMU_CB_S1_MAIR0 0x38
#define ARM_SMMU_CB_S1_MAIR1 0x3c
#define ARM_SMMU_GR0_SMR(n) (0x800 + ((n) << 2))
#define ARM_SMMU_SMR_VALID BIT(31)
#define ARM_SMMU_SMR_MASK GENMASK(31, 16) // Always 0 for now??
#define ARM_SMMU_SMR_ID GENMASK(15, 0)
#define ARM_SMMU_GR0_S2CR(n) (0xc00 + ((n) << 2))
#define ARM_SMMU_S2CR_PRIVCFG GENMASK(25, 24)
enum arm_smmu_s2cr_privcfg {
S2CR_PRIVCFG_DEFAULT,
S2CR_PRIVCFG_DIPAN,
S2CR_PRIVCFG_UNPRIV,
S2CR_PRIVCFG_PRIV,
};
#define ARM_SMMU_S2CR_TYPE GENMASK(17, 16)
enum arm_smmu_s2cr_type {
S2CR_TYPE_TRANS,
S2CR_TYPE_BYPASS,
S2CR_TYPE_FAULT,
};
#define ARM_SMMU_S2CR_EXIDVALID BIT(10)
#define ARM_SMMU_S2CR_CBNDX GENMASK(7, 0)
#define VMID_UNUSED 0xff
struct qcom_smmu_priv {
phys_addr_t base;
struct list_head devices;
struct udevice *dev;
/* Read-once config */
int num_cb;
int num_smr;
u32 pgshift;
u32 cb_pg_offset;
};
struct mmu_dev {
struct list_head li;
struct udevice *dev;
u16 sid;
u16 cbx;
u16 smr;
};
#define page_addr(priv, page) ((priv)->base + ((page) << (priv)->pgshift))
#define smmu_readl(priv, page, offset) readl(page_addr(priv, page) + offset)
#define gr0_readl(priv, offset) smmu_readl(priv, ARM_SMMU_GR0, offset)
#define gr1_readl(priv, offset) smmu_readl(priv, ARM_SMMU_GR1, offset)
#define cbx_readl(priv, cbx, offset) \
smmu_readl(priv, (priv->cb_pg_offset) + cbx, offset)
#define smmu_writel(priv, page, offset, value) \
writel((value), page_addr(priv, page) + offset)
#define gr0_writel(priv, offset, value) \
smmu_writel(priv, ARM_SMMU_GR0, offset, (value))
#define gr1_writel(priv, offset, value) \
smmu_writel(priv, ARM_SMMU_GR1, offset, (value))
#define cbx_writel(priv, cbx, offset, value) \
smmu_writel(priv, (priv->cb_pg_offset) + cbx, offset, value)
#define gr1_setbits(priv, offset, value) \
gr1_writel(priv, offset, gr1_readl(priv, offset) | (value))
static int get_stream_id(struct udevice *dev)
{
ofnode node = dev_ofnode(dev);
struct ofnode_phandle_args args;
int count = ofnode_parse_phandle_with_args(node, "iommus",
"#iommu-cells", 0, 0, &args);
if (count < 0 || args.args[0] == 0) {
printf("Error: %s: iommus property not found or wrong number of cells\n",
__func__);
return -EINVAL;
}
return args.args[0]; // Some mask from bit 16 onward?
}
static struct mmu_dev *alloc_dev(struct udevice *dev)
{
struct qcom_smmu_priv *priv = dev_get_priv(dev->iommu);
struct mmu_dev *mmu_dev;
int sid;
sid = get_stream_id(dev);
debug("%s %s has SID %#x\n", dev->iommu->name, dev->name, sid);
if (sid < 0 || sid > 0xffff) {
printf("\tSMMU: Invalid stream ID for %s\n", dev->name);
return ERR_PTR(-EINVAL);
}
/* We only support a single SID per device for now */
list_for_each_entry(mmu_dev, &priv->devices, li) {
if (mmu_dev->sid == sid)
return ERR_PTR(-EEXIST);
}
mmu_dev = calloc(sizeof(*mmu_dev), 1);
if (!mmu_dev)
return ERR_PTR(-ENOMEM);
mmu_dev->dev = dev;
mmu_dev->sid = sid;
list_add_tail(&mmu_dev->li, &priv->devices);
return mmu_dev;
}
/* Find and init the first free context bank */
static int alloc_cb(struct qcom_smmu_priv *priv)
{
u32 cbar, type, vmid, val;
for (int i = 0; i < priv->num_cb; i++) {
cbar = gr1_readl(priv, ARM_SMMU_GR1_CBAR(i));
type = FIELD_GET(ARM_SMMU_CBAR_TYPE, cbar);
vmid = FIELD_GET(ARM_SMMU_CBAR_VMID, cbar);
/* Check that the context bank is available. We haven't reset the SMMU so
* we just make a best guess.
*/
if (type != CBAR_TYPE_S2_TRANS &&
(type != CBAR_TYPE_S1_TRANS_S2_BYPASS ||
vmid != VMID_UNUSED))
continue;
debug("%s: Found free context bank %d (cbar %#x)\n",
priv->dev->name, i, cbar);
type = CBAR_TYPE_S1_TRANS_S2_BYPASS;
vmid = 0;
cbar &= ~ARM_SMMU_CBAR_TYPE & ~ARM_SMMU_CBAR_VMID;
cbar |= FIELD_PREP(ARM_SMMU_CBAR_TYPE, type) |
FIELD_PREP(ARM_SMMU_CBAR_VMID, vmid);
gr1_writel(priv, ARM_SMMU_GR1_CBAR(i), cbar);
val = IS_ENABLED(CONFIG_ARM64) == 1 ? ARM_SMMU_CBA2R_VA64 : 0;
gr1_setbits(priv, ARM_SMMU_GR1_CBA2R(i), val);
return i;
}
return -1;
}
/* Search for a context bank that is already configured for this stream
* returns the context bank index or -ENOENT
*/
static int find_smr(struct qcom_smmu_priv *priv, u16 stream_id)
{
u32 val;
int i;
for (i = 0; i < priv->num_smr; i++) {
val = gr0_readl(priv, ARM_SMMU_GR0_SMR(i));
if (!(val & ARM_SMMU_SMR_VALID) ||
FIELD_GET(ARM_SMMU_SMR_ID, val) != stream_id)
continue;
return i;
}
return -ENOENT;
}
static int configure_smr_s2cr(struct qcom_smmu_priv *priv, struct mmu_dev *mdev)
{
u32 val;
int i;
for (i = 0; i < priv->num_smr; i++) {
/* Configure SMR */
val = gr0_readl(priv, ARM_SMMU_GR0_SMR(i));
if (val & ARM_SMMU_SMR_VALID)
continue;
val = mdev->sid | ARM_SMMU_SMR_VALID;
gr0_writel(priv, ARM_SMMU_GR0_SMR(i), val);
/*
* WARNING: Don't change this to use S2CR_TYPE_BYPASS!
* Some Qualcomm boards have angry hypervisor firmware
* that converts S2CR type BYPASS to type FAULT on write.
* We don't use virtual addressing for these boards in
* u-boot so we can get away with using S2CR_TYPE_TRANS
* instead
*/
val = FIELD_PREP(ARM_SMMU_S2CR_TYPE, S2CR_TYPE_TRANS) |
FIELD_PREP(ARM_SMMU_S2CR_CBNDX, mdev->cbx);
gr0_writel(priv, ARM_SMMU_GR0_S2CR(i), val);
mdev->smr = i;
break;
}
/* Make sure our writes went through */
mb();
return 0;
}
static int qcom_smmu_connect(struct udevice *dev)
{
struct mmu_dev *mdev;
struct qcom_smmu_priv *priv;
int ret;
debug("%s: %s -> %s\n", __func__, dev->name, dev->iommu->name);
priv = dev_get_priv(dev->iommu);
if (WARN_ON(!priv))
return -EINVAL;
mdev = alloc_dev(dev);
if (IS_ERR(mdev) && PTR_ERR(mdev) != -EEXIST) {
printf("%s: %s Couldn't create mmu context\n", __func__,
dev->name);
return PTR_ERR(mdev);
} else if (IS_ERR(mdev)) { // -EEXIST
return 0;
}
if (find_smr(priv, mdev->sid) >= 0) {
debug("Found existing context bank for %s, skipping init\n",
dev->name);
return 0;
}
ret = alloc_cb(priv);
if (ret < 0 || ret > 0xff) {
printf("Error: %s: failed to allocate context bank for %s\n",
__func__, dev->name);
return 0;
}
mdev->cbx = ret;
/* Configure context bank registers */
cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_TTBR0, 0x0);
cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_TTBR1, 0x0);
cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_S1_MAIR0, 0x0);
cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_S1_MAIR1, 0x0);
cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_SCTLR,
ARM_SMMU_SCTLR_CFIE | ARM_SMMU_SCTLR_CFRE |
ARM_SMMU_SCTLR_CFCFG);
cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_TCR, 0x0);
/* Ensure that our writes went through */
mb();
configure_smr_s2cr(priv, mdev);
return 0;
}
#ifdef DEBUG
static inline void dump_boot_mappings(struct qcom_smmu_priv *priv)
{
u32 val;
int i;
debug(" SMMU dump boot mappings:\n");
for (i = 0; i < priv->num_smr; i++) {
val = gr0_readl(priv, ARM_SMMU_GR0_SMR(i));
if (val & ARM_SMMU_SMR_VALID)
debug("\tSMR %3d: SID: %#lx\n", i,
FIELD_GET(ARM_SMMU_SMR_ID, val));
}
}
#else
#define dump_boot_mappings(priv) \
do { \
} while (0)
#endif
static int qcom_smmu_probe(struct udevice *dev)
{
struct qcom_smmu_priv *priv;
u32 val;
priv = dev_get_priv(dev);
priv->dev = dev;
priv->base = dev_read_addr(dev);
INIT_LIST_HEAD(&priv->devices);
/* Read SMMU config */
val = gr0_readl(priv, ARM_SMMU_GR0_ID0);
priv->num_smr = FIELD_GET(ARM_SMMU_ID0_NUMSMRG, val);
val = gr0_readl(priv, ARM_SMMU_GR0_ID1);
priv->num_cb = FIELD_GET(ARM_SMMU_ID1_NUMCB, val);
priv->pgshift = FIELD_GET(ARM_SMMU_ID1_PAGESIZE, val) ? 16 : 12;
priv->cb_pg_offset = 1
<< (FIELD_GET(ARM_SMMU_ID1_NUMPAGENDXB, val) + 1);
dump_boot_mappings(priv);
return 0;
}
static int qcom_smmu_remove(struct udevice *dev)
{
(void)dev;
/*
* We should probably try and de-configure things here,
* however I'm yet to find a way to do it without crashing
* and it seems like Linux doesn't care at all anyway.
*/
return 0;
}
static struct iommu_ops qcom_smmu_ops = {
.connect = qcom_smmu_connect,
};
static const struct udevice_id qcom_smmu500_ids[] = {
{ .compatible = "qcom,sdm845-smmu-500" },
{ /* sentinel */ }
};
U_BOOT_DRIVER(qcom_smmu500) = {
.name = "qcom_smmu500",
.id = UCLASS_IOMMU,
.of_match = qcom_smmu500_ids,
.priv_auto = sizeof(struct qcom_smmu_priv),
.ops = &qcom_smmu_ops,
.probe = qcom_smmu_probe,
.remove = qcom_smmu_remove,
.flags = DM_FLAG_OS_PREPARE,
};